Garante per la protezione dei dati personali (Italy) · 2 February 2023
AI chatbot provider
Name not published.
About: Consent, Data principles, Special categories, Transparency, Unlawful processing
- Regulator
- Garante per la protezione dei dati personali (Italy)
- Decided
- 2 February 2023
- Country
- Italy
- Sector
- Not given
- Regulator’s reference
- 9852214
- Fino case number
- 2023/IT/095
What happened
Under Article 58(2)(f) GDPR, the Italian DPA imposed a temporary limitation on processing of an AI-powered ChatBot. The privacy policy did not clarify which legal basis had been relied upon by the company, particularly for processing of underage users. The DPA also held that no age verification mechanism was in place.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processingRead →
- Art. 8Conditions applicable to child's consent in relation to information society servicesRead →
- Art. 9Processing of special categories of personal dataRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 58Powers58(1) · 58(2)(f)Read →
- Consent
- Data principles
- Special categories
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/IT/095.